10535 matches found
CVE-2005-1760
sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and allows local users to gain privileges...
CVE-2005-1933
Dashboard in Apple Mac OS X Tiger 10.4 allows attackers to execute arbitrary commands by overriding the behavior of system widgets via a user widget with the same bundle identifier CFBundleIdentifier, a different vulnerability than CVE-2005-1474...
RHEL 2.1 : squid (RHSA-2005:489)
An updated squid package that fixes several security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Squid is a full-featured Web proxy cache. A bug was found in the way Squid handles PUT and POST requests. It is possible fo...
RHEL 4 : gzip (RHSA-2005:357)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:357 advisory. The gzip package contains the GNU gzip data compression program. A bug was found in the way zgrep processes file names. If a user can be...
RHEL 4 : gftp (RHSA-2005:410)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:410 advisory. gFTP is a multi-threaded FTP client for the X Window System. A directory traversal bug was found in gFTP. If a user can be tricked into downloading a...
WebHints hints.pl Arbitrary Command Execution
The remote host is running the WebHints scripts. This version of WebHints has a remote command execution vulnerability in hints.pl. A remote attacker could exploit this to execute arbitrary commands on the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
RHEL 4 : tcpdump (RHSA-2005:505)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:505 advisory. Tcpdump is a command line tool for monitoring network traffic. A denial of service bug was found in tcpdump during the processing of certain network...
RHEL 4 : mikmod (RHSA-2005:506)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:506 advisory. MikMod is a well known MOD music file player for UNIX-based systems. A buffer overflow bug was found in mikmod during the processing of archive...
RHEL 4 : gedit (RHSA-2005:499)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:499 advisory. gEdit is a small text editor designed specifically for the GNOME GUI desktop. A file name format string vulnerability has been discovered in gEdit. It...
CVE-2005-1936
CVE-2005-1936 concerns the embedded web server in Xerox Document Centre/WorkCentre devices (models 240–555) running System Software 27.18.017 and earlier. The NVD description states that a vulnerability in the web server could allow attackers to gain unauthorized access, with CVSS history indicat...
GLSA-200506-09 : gedit: Format string vulnerability
The remote host is affected by the vulnerability described in GLSA-200506-09 gedit: Format string vulnerability A format string vulnerability exists when opening files with names containing format specifiers. Impact : A specially crafted file with format specifiers in the filename can cause...
CVE-2005-1267
The bgpupdateprint function in tcpdump 3.x does not properly handle a -1 return value from the decodeprefix4 function, which allows remote attackers to cause a denial of service infinite loop via a crafted BGP packet...
RHEL 4 : dbus security update. (Low) (RHSA-2005:102)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:102 advisory. D-BUS is a system for sending messages between applications. It is used both for the systemwide message bus service, and as a per-user-login-session...
GLSA-200506-05 : SilverCity: Insecure file permissions
The remote host is affected by the vulnerability described in GLSA-200506-05 SilverCity: Insecure file permissions The SilverCity package installs three executable files with insecure permissions. Impact : A local attacker could modify the executable files, causing arbitrary code to be executed...
SUSE-SA:2005:029: kernel
The remote host is missing the patch for the advisory SUSE-SA:2005:029 kernel. The Linux kernel is the core component of the Linux system. This update fixes various security as well as non-security problems discovered since the last round of kernel updates. The following security problems have be...
leafnode security announcement leafnode-SA-2005-02 (CAN-2005-1911)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 leafnode-SA-2005:02.fetchnews-hangs-on-header Topic: potential denial of service in leafnode Announcement: leafnode-SA-2005:02 Author: Matthias Andree Version: 1.00 Announced: 2005-06-08 Category: main Type: potential denial of service Impact: fetchne...
Fedora Core 3 : tcpdump-3.8.2-9.FC3 (2005-406)
Tue Jun 07 2005 Martin Stransky - 14:3.8.2-9.FC3 - fix for CVE-2005-1267 - BGP DoS, 159209 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...
CVE-2005-1933
CVE-2005-1933 affects Apple Mac OS X Tiger (10.4) Dashboard. It arises when a user widget uses the same CFBundleIdentifier as a system widget, causing Dashboard to override the legitimate widget and potentially let the attacker execute arbitrary commands. The impact is user-level code execution v...
CVE-2005-0751
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate has been revoked by its Candidate Numbering Authority CNA because it was initially assigned to a problem that was not a security issue. Notes: none...